Page 395 - CyberSecurityEssentialsEnglish

Differences among Arab legal and cultural systems must also be respected. An example from
one country may not be turned into a general regional rule. The better design separates a
shared layer of principles from local layers for law, sector, language, and procedure, and

defines when a question must be referred to a local expert.

↻ A practical activity
Choose ten real bilingual questions from your organization. Test accuracy, terminology,
names, dates, right-to-left layout, and citation of the source. Record the differences
between the two languages, then decide whether you need a glossary, an improved
knowledge base, or specialist human review.

● Remember: neither copy a foreign framework nor reject it
Good local governance neither copies a foreign framework nor rejects it. It uses it as a
shared language, then translates it into real obligations, data, culture, and risks inside the
organization, the country, and the sector.

8.11 An Executive Toolkit and a Practical Lab
◆ Key idea: governance tools make responsibility executable.
The chapter ends with usable outputs: a short policy, a register of uses, a risk register,

and an approval template. The aim is not to produce more paper, but to make decisions
understandable, reviewable, and improvable.

First: A One-Page AI Policy

A short policy begins with the purpose and the scope, then defines the permitted, restricted,
and prohibited uses, the data rules, the review and disclosure requirements, and the route
for requesting an exception and reporting an incident. More detailed procedures can be
attached later, but an employee must be able to understand from the short version what to

do in a practical situation.

394